EUVD-2024-44194

Malicious code in bioql PyPI...

CVE-2024-4584

A vulnerability, which was classified as problematic, has been found in Faraday GM8181 and GM828x up to 20240429. Affected by this issue is some unknown functionality of the file /commandport.ini. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit h...

CVE-2024-4582: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntpsrv leads to os command injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-4584: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in Faraday GM8181 and GM828x up to 20240429. Affected by this issue is some unknown functionality of the file /commandport.ini. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit h...

Faraday GM8181和Faraday GM828x 安全漏洞

The Faraday GM8181 is a hardware device from China-based Smartwon Technology Faraday. A security vulnerability exists in Faraday GM8181 and GM828x version 20240429 and prior versions. An attacker can exploit the vulnerability to obtain sensitive information...

Faraday GM8181和Faraday GM828x 操作系统命令注入漏洞

The Faraday GM8181 and Faraday GM828x are both hardware devices from China-based Smartwon Technology Faraday. An operating system command injection vulnerability exists in the Faraday GM8181 and GM828x version 20240429 and earlier versions, which stems from the fact that incorrect manipulation of...

CVE-2024-4583: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic was found in Faraday GM8181 and GM828x up to 20240429. Affected by this vulnerability is an unknown functionality of the component Request Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been...